Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/DF4R54GK1qwRWFDBGUSLGBLlvGQ.roa
File: DF4R54GK1qwRWFDBGUSLGBLlvGQ.roa (raw, json)
Hash identifier: hSV4Oh/5jJRGVFTBAtkBDd7jCrElG8uSHu25zzZr1Fg=
Subject key identifier: 0C:5E:11:E7:81:8A:D6:AC:11:58:50:C1:19:44:8B:18:12:E5:BC:64
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01969BFF6E9516C1CE0A0D83FD65A263919E
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/DF4R54GK1qwRWFDBGUSLGBLlvGQ.roa
Signing time: Sun 04 May 2025 15:52:10 +0000
ROA not before: Sun 04 May 2025 15:52:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 91.109.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9b:ff:6e:95:16:c1:ce:0a:0d:83:fd:65:a2:63:91:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: May 4 15:52:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c5e11e7818ad6ac115850c119448b1812e5bc64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e4:5e:87:a7:58:eb:10:01:de:49:7f:2a:61:
12:c7:c9:78:a0:83:db:3b:d9:e9:f7:ee:9c:39:f7:
d6:3a:7b:fd:3a:b6:fb:c4:60:0f:4a:6f:a5:8d:61:
0d:5d:7f:28:2f:2c:5e:38:78:04:46:6c:2c:71:ed:
da:cc:1e:cd:ef:7d:2e:2a:40:d8:7b:99:c7:6a:db:
47:9a:2e:da:12:51:68:a5:b2:fc:c8:75:1b:26:1f:
5f:a1:18:49:89:a6:f5:b7:54:4a:bd:f0:3b:46:4f:
74:c3:26:0b:a4:39:53:ea:e0:16:58:4d:15:2d:f6:
3a:71:f7:e8:90:3b:98:0a:d9:7a:e5:74:99:6e:86:
fe:91:b8:fc:d6:7d:b5:5f:8b:96:14:eb:d8:e2:1c:
4d:cc:d2:39:8f:62:92:c5:bc:21:7b:31:9c:13:da:
ad:2e:9f:5b:be:6e:0e:4e:a6:c6:eb:10:75:d9:d6:
5d:56:a2:92:5e:01:76:8a:9f:f7:fd:17:25:bb:bd:
f0:6b:94:81:ee:76:48:bd:30:cc:08:cc:79:2a:96:
3a:1a:91:f4:1d:f6:eb:1f:fa:3a:7e:86:37:1d:98:
0e:3b:d9:21:ac:9a:bd:84:77:cf:ca:c9:a3:7d:82:
96:5d:36:4d:18:b4:ba:57:72:1b:6d:77:69:42:7d:
63:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5E:11:E7:81:8A:D6:AC:11:58:50:C1:19:44:8B:18:12:E5:BC:64
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/DF4R54GK1qwRWFDBGUSLGBLlvGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.46.0/24
Signature Algorithm: sha256WithRSAEncryption
47:28:7a:46:4c:8b:6d:23:61:a0:b8:bf:ba:38:6f:35:86:a2:
38:aa:74:ce:94:13:48:f5:cb:65:91:e2:9f:27:32:0d:10:42:
18:01:82:5b:e3:c5:a8:89:3f:5a:39:bb:9e:6d:18:49:6b:b6:
c6:9a:0f:37:f2:fd:37:98:40:84:0e:85:57:af:87:c8:71:7d:
9e:31:10:e5:b0:23:95:10:ed:0f:86:75:e2:ce:16:27:06:ee:
e2:4e:fd:e3:38:22:cc:a3:6f:33:37:ef:4e:d2:b0:08:9a:2e:
44:a1:45:75:01:fa:c7:a8:cb:2e:60:d6:57:40:fc:f7:0d:46:
7c:c4:a2:e3:b2:7b:43:fe:f8:dd:54:0c:c5:1c:4d:0e:0e:36:
35:bb:fa:0e:d9:07:38:51:ed:60:8f:d7:23:e9:4c:cb:ad:d2:
48:97:01:77:aa:7a:82:57:01:c2:8d:44:1f:1d:17:7b:58:d6:
e8:36:63:7a:70:4d:f0:95:07:74:6b:81:4c:f8:6d:7f:f0:63:
7e:08:1c:f7:e0:74:2a:e8:98:26:47:22:54:32:5e:dc:a2:e4:
e1:2d:d8:88:c0:a4:3d:93:b4:98:ea:5b:bb:86:74:82:ce:ad:
ac:e4:d4:23:ad:0c:63:8d:72:f3:28:3e:cf:90:a5:bb:7f:e9:
93:19:a2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:38:12 2025 by rpki-client